What 'your data stays in Australia' actually means, and why it matters

"Your data is in the cloud" is one of those phrases that sounds reassuring and means almost nothing. The cloud is somebody's computer, and that computer is in a country. Which country turns out to matter.

What data residency is

Data residency is simply where your data is physically stored — which data centre, in which country. When we say a database is hosted in Sydney, we mean the servers holding your customer records, invoices and documents are in a data centre in Sydney, operated by a provider (in our case Supabase running on AWS's Sydney region).

Most software you use doesn't tell you this. Plenty of "Australian" software products store data in the United States or Singapore because that's where the vendor's platform lives.

Why it matters

Privacy obligations. Australian privacy law treats sending personal information overseas as a specific act with its own rules. If your customer data is stored offshore, you carry obligations about that transfer — even if you never think about it. Keeping data in Australia keeps things simpler. If you're in health, disability services, childcare or finance, this is not a theoretical concern; funders and auditors ask.

Legal access. Data stored in another country is subject to that country's laws and legal processes. That's rarely an issue for a small business, but it's a reason larger customers and government-adjacent organisations increasingly require Australian hosting from their suppliers.

Speed. A database in Sydney responds to a user in Parramatta in a few milliseconds. One in Virginia adds a noticeable delay to every click. For a tool your staff use all day, that adds up.

Customer trust. "Your information is stored in Australia" is a sentence customers understand and like. It's a small, honest advantage.

Where AI fits in

AI tools add a wrinkle: even if your database is in Sydney, the AI model that reads a document or drafts a quote might be run overseas. Two things to check:

1. Is your data used to train the model? Commercial API terms from the major providers say no. Consumer chat tools often say yes unless you turn it off. Any tool we build uses commercial APIs with no-training terms.
2. What's sent, and what's kept? A well-built tool sends only what's needed for the task and stores nothing with the AI provider. Your records stay in your Australian database.

Questions to ask any software provider

• Where, physically, is my data stored? (Country and, ideally, city.)
• Where are backups stored?
• If the product uses AI, which provider, and is my data used for training?
• Can I export all of my data, in a standard format, at any time?
• Who owns the data — me, or you?

Any provider worth using can answer all five in a sentence each.

What we do

Databases and file storage in Sydney. Encrypted connections. Daily backups, also in Australia. Commercial AI services with no-training terms, sending only what the task needs. You own the data and the code, and you can leave with both.

The short version

Data residency is where your data lives. In Australia is simpler, faster and more trustworthy than elsewhere, and it's not more expensive. If a provider can't tell you where your data is, that's your answer.